Controller: Person (or entity) determining the purpose and means of processing personal data.
Processor: Person (or entity) that processes data on behalf of the Controller.
Personal Data: is information that identifies you as an individual or relates to an identifiable person, such as name, postal address, telephone number, email address, credit card number, and social media account ID. It does not include strings of code such as browser cookie IDs.
Sensitive Personal Data: Data that reveals race or ethnic origin, political opinions, religious or other beliefs, trade union membership, physical or mental health, sex life and criminal background.
Data Subject: A living individual subject of the data.
Data Breach: Any accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
GDPR: General Data Protection Regulation (the law).
INFORMATION WE MAY COLLECT FROM YOU
As data controller SF Studios accepts responsibility for setting clear guidelines to its processors regarding the storing and processing of your data for business and marketing purposes. This includes information collected through our website. In case of a data breach SF Studios will do what is legally available and necessary to protect your interests.
SF Studios affiliates only have access to information that you, the data subject, provide at the point of creating an account via the SF Studios website, (www.sftudioslondon.com), “Book Now”, given that you have not otherwise interacted with those companies. SF Studios does not take responsibility for information provided to its affiliates that were not acquired at the point of registration on the SF Studios website or were not provided to us directly using other means of communication. For example if you register an account with MindBody using www.mindbodyonline.com or the MindBody app, SF Studios does not take responsibility for personal information provided using those means.
Please note that SF Studios and its affiliates do not ask for or handle sensitive personal information.
We may collect and process the following data about you:
· Information that you provide by filling in forms on our site www.sftudioslondon.com (“our site”). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services.
· Details of transactions you carry out through our site, including invoicing, collecting payment and of the fulfillment of your orders. However, any financial information (including debit and credit card numbers) collected from you is used only in order to authorise payment and bill you for products and services and is not stored by us.
· Details of your visits to our site including, but not limited to, traffic data, location data, web blogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.
We may also ask you for information when you report a problem with our site.
If you contact us, we may keep a record of that correspondence.
We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
SF Studios collects your personal information on the lawful basis of legitimate interest. The information we ask for (for example name, date of birth, address, email address) is to ensure our products and services are used as intended and minimises company loss. (For example it helps us prevent and detect the creation of duplicate accounts and therefore the taking advantage of our offers more than once.)
PROCESSING YOUR DATA
MindBody (MindBody Inc.) is our Data Processor. SF Studios stores and processes data using the MindBody platform for all our business activities.
As Data Controller SF Studios only allows the processing of your personal data to:
· Ensure that content from our site is presented in the most effective manner for you and for your computer.
· Provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
· Carry out our obligations arising from any contracts entered into between you and us.
· Allow you to participate in interactive features of our service, when you choose to do so.
· Notify you about changes to our service.
For more details about how MindBody Inc. handles your data please see www.mindbodyonline.com/privacy-policy
To read in more detail about the relationship of us and our Processor please see the Privacy Annex on the MindBody website: www.mindbodyonline.com/terms-of-service/privacy-annex
WHERE YOUR DATA IS STORED
Your data is stored outside of the EEA and is also processed by staff operating outside the EEA who work for us. Such staff maybe engaged in, among other things, the fulfillment of your booking, the processing of your payment details and the provision of support services.
All information you provide to us is stored on secure servers. Any payment transactions will be encrypted. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
For more information about how your data is stored and processed please see https://www.mindbodyonline.com/privacy-policy
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
If you are an existing customer, meaning that you registered an account on our website prior to 25/05/2018, we will only contact you by electronic means (e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale to you. You can at any time unsubscribe any time by clicking “Unsubscribe” in the emails and following the instructions in the texts. Or by emailing firstname.lastname@example.org
If you are a new customer, we will contact you by electronic means only if you have clearly consented to this. This is shown by you ticking the relevant box on our registration form. SF Studios does not allow marketing communication to be sent to you from any of our affiliates or other third parties without seeking your consent first. You can unsubscribe any time as mentioned previously.
As explained in (3) is our main Data Processor. For details please read above.
We use Constantcontact to manage our mailing list for our newsletter and other marketing communication. Constantcontact only has access to your name and email address and is not authorised to send you marketing communication in relation to any of their products and services. Constantcontact does not sell lists or email addresses. For more information please see: https://www.endurance.com/privacy
Perkville is the company that allows you to create points every time you use SF Studios services. You then can use those points to turn them into perks. Perkville has the same information of you as us. The data is only processed for business purposes and to be able to identify you if there is a problem with your account. For more information please see: https://www.perkville.com/privacy/
Please note that our Data Processors use Sub-Processors to be able to fulfil their tasks. Sub-Processors are bound by the GDPR as long as they handle personal date of EEA citizens. In addition, agreements between Processors and Sub-Processors cannot violate agreements between the Data Controller and the Data Processor.
IP ADDRESSES AND COOKIES
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual. For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve our site and to deliver a better and more personalised service.
They enable us:
· To estimate our audience size and usage pattern.
· To store information about your preferences, and so allow us to customise our site according to your individual interests.
· To speed up your searches.
DISCLOSURE OF YOUR INFORMATION
We may disclose your personal information to third parties:
In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
If our business or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions of supply and other agreements; or to protect the rights, property, or safety of our business, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
ACCESS / CHANGE / REMOVE INFORMATION
The Data Protection Act gives you the right to access information held about you. Your right of access can be exercised in accordance with this Act. We will not charge a fee unless your request is manifestly unfounded or excessive or you are requesting further copies of your data. In these instances we may charge a reasonable fee for the administrative costs of complying with the request.
MindBody Self Service Privacy Portal
You can also update your account information by logging in to your account using the MindBody Portal. To access this page, you will be given the option to subscribe or unsubscribe through one of the following:
· Your automated emails from MINDBODY
· From the MINDBODY app or
· Via the link in your client account online
After clicking on one of these links, you’ll notice the Data Options tab located next to Communication Preferences. Here you can request access to, remove or alter your data.
SF Movement Studio Ltd. 5 Ella Mews, London, NW3 2NH
Last update: 12th October 2018
1) Controllers of Personal Information
Any personal information provided to or gathered by SF Studios is controlled by SF Studios, whose registered office is at: SF Movement Studio Ltd, 5 Ella Mews, London, NW3 2NH.
2) What Personal Information about studio users does SF Studios Gather?
The information we gather from our studios users help us to continually improve your experience at SF Studios. This personal information may include: your name and contact information; date of birth; preferred communication methods, address. We also create information that becomes part of the personal information we hold about you, such as your membership number and your usage of the studios. We may also collect and create details on joint members and other family members, where applicable, including family members under the age of 18.
We also collect the following information:
The term "sensitive information" in this context refers to information related to your health. We do specifically collect health data to the extent that it is required to assess your readiness for physical exercise. We will use health information provided by you exclusively to serve you better and meet your particular needs. By providing the sensitive information to us, you are consenting to our using it in the manner set out in this Policy.
Personal Information from Children
We do not knowingly collect personal information from individuals under 18 years of age without the permission of their parent or guardian. As a parent or legal guardian, please do not to allow your children to submit personal information without your permission.
Photographs for Membership Card
In the interests of security and the prevention of crime, we may take a digital photograph of each member to whom a membership card is issued. By providing the digital photograph to us, you are consenting to our using it in the manner set out in this Policy.
Contacting us via Website or otherwise
When you use the www.sfstudioslondon.com website (“Our Site”) or contact us by post, telephone, fax, email or SMS, we collect, store and use certain personal information that you disclose to us. This includes details such as your name, address, telephone, fax, email and mobile phone number as well as traffic data, location data, web logs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access. If you contact us, we may keep a record of that correspondence.
We use CCTV in our SF Movement Studio for health and security reasons. If you have any queries in relation to the use of CCTV operating in and around our clubs please contact us.
We also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
3) What do we do with personal information collected from you?
We use personal information to provide the services you request from SF Studios such as to facilitate: staff administration, administration of your membership of the club, facilitate bookings of classes and appointments with our own or third party service providers and other transactions. We may also use the information to: advertise products and services, to process payments and maintain accounts and records, to prevent crime and aid in the prosecution of offenders, and to administer and maintain membership records. In addition, we use this information to improve our platform, prevent or detect fraud or abuses of our website and enable third parties to carry out technical, logistical or other functions on our behalf.
We also use your details to send you newsletters and promotions, and to conduct online surveys or surveys by telephone; prize draws; competitions and other promotions via email, telephone or post. We will also use the information in the course of collecting your payments that may be due to us from you.
4) What about Cookies?
Cookies are alphanumeric identifiers that we transfer to your computer's hard drive through your web browser to enable our systems to recognise your browser and to automatically collect information from your computer such as your IP address and other details about your computer which are automatically collected by our web server, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.
If you do leave cookies turned on, be sure to sign off when you finish using a shared computer.
To estimate our audience size and usage pattern.
To store information about your preferences, and so allow us to customise Our Site according to your individual interests.
To speed up your searches.
To recognise you when you return to Our Site.
5) Does SF Studios share the Information it receives?
Promotional Offers: Sometimes we send offers to studio users on behalf of other businesses. When we do this, we do not give that business your name and address. If you do not want to receive such offers, please let us know in writing.
With your consent, other than as set out above, you will receive notice when information about you might go to third parties and you will have an opportunity to choose not to share the information.
6) How Secure is Information about me?
We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personally identifiable information. Our security procedures mean that we may occasionally request proof of identity before we disclose personal information to you.
7) What about Links to other websites?
Our site may include links to other websites. We do not provide any personally identifiable customer information to these advertisers or third-party websites.
8) What Choices do I have?
9) Are Children allowed to use SF Studios?
If you are under 18, you may use SF Studios only with the involvement of a parent or guardian.
10) What Rights do I have in relation to my Personal Information?
You have the right to ask us not to process your personal information for marketing purposes by sending an email to theadministration team. The General Data Protection (GDPR 2018) gives you the right to access personal information held about you. Your right of access can be exercised in accordance with the. If you would like to access your personal information contact us by email email@example.com by post to Data Requests, SF Studios 5 Ella Mews, London, NW3 2NH.
11) Notices and Revisions
If you have any concern about privacy at SF Studios, please e-mail us a thorough description and we will try to resolve the issue for you.
SF MOVEMENT STUDIO LTD NEWSLETTER PRIVACY NOTICE
This privacy notice tells you about the information we collect from you when you sign up to our email newsletter. In collecting this information, we are acting as a data controller and, by law, we are required to provide you with information about us, about why and how we use your data, and about the rights you have over your data. We ask for your consent before collecting or processing any of your personal information.
WHO ARE WE?
Our company name is SF Movement Studio Limited, with a registered address of 5 Ella Mews, London, NW3 2NH. You can contact us at firstname.lastname@example.org or by phone on 0207 2841168. You can also contact us by post: SF Movement Studio Ltd, 5 Ella Mews, London, NW3 2NH. If you have concerns about how your data is used, please email SF Movement Studio Ltd Office Manager at email@example.com
WHAT PERSONAL DATA DO WE COLLECT?
When signing up for our newsletter, we collect your name, address, email address, Mobile number and IP address you signed up from. We collect this information through forms on our website and through Mindbody when you create an account with us.
We also collect information such as when you have opened or clicked on one of our emails. This helps us work out which of our emails are most interesting to our subscribers. We store the date you signed up and your approximate location.
If signing up via our website, you give your consent by typing in your email address and clicking ‘subscribe’ in the clearly stated section for signing up to the newsletter. If you sign up via our SF Movement Studio mobile application. Your affirmative consent is given when you tick the checkbox next to “Subscribe to our newsletter & promotions”. You can withdraw your consent at any time by clicking on the unsubscribe link at the bottom of every newsletter we send.
WHY DO WE COLLECT THIS INFORMATION?
We collect this information for the purposes of keeping you up to date with the latest news and events at SF Studios. Your information is not used for any other purpose. We collect your IP to prevent spam and to validate your consent.
WHAT DO WE DO WITH YOUR INFORMATION?
HOW LONG DO WE KEEP YOUR INFORMATION FOR?
Your information is stored for as long as you stay our client or it requested to keep by the law. You can request for your information to be deleted by emailing firstname.lastname@example.org. We will never email you marketing messages if you have unsubscribed. From time-to-time, we may clean up our mailing list by deleting subscribers who have not opened any of our emails for a long period of time.
YOUR RIGHTS OVER YOUR INFORMATION
By law, you can ask us what information we hold about you, and you can ask us to correct it if it is inaccurate. You can unsubscribe from our newsletter at any time by clicking on the “Unsubscribe” link at the bottom of every email. You have the right to fully withdraw your consent to us processing your data by asking us to permanently delete your data. To submit a request by email, post or telephone, please contact the Office Manager on the details below:
Data Protection Officer,
SF Movement Studio Ltd,
5 Ella Mews,
YOUR RIGHT TO COMPLAIN
If you have concerns about how we process your data, your initial contact should be with our Data Protection Officer (details above). If you are not satisfied with the outcome, you can contact the Information Commissioner’s Office via their website at www.ico.org/concerns or write to them at:
Information Commissioner’s Office